CVE-2026-4465Disclosure(dlink / dir-513)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formSysCmd. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • dir-513
  • dir-513_firmware

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
dir-513dir-513_firmware

3 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-20: 2Technical Details · 2026-03-20: 203-20
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-4465 Remote OS Command Injection in D-Link DIR-513 Router Firmware 1.10 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4465

    Post summary

    CVE‑2026‑4465 is a Remote OS Command Injection vulnerability in D‑Link DIR‑513 Router Firmware 1.10, presented as a basic disclosure with a link to a vulnerability details page.

    0000052
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-4465 A flaw has been found in D-Link DIR-513 1.10. The impacted element is an unknown function of the file /goform/formSysCmd. Executing a manipulation of the argument sysCm… https://www.cve.org/CVERecord?id=CVE-2026-4465

    Post summary

    A new vulnerability (CVE‑2026‑4465) has been disclosed in D‑Link DIR‑513 1.10, affecting an unknown function in /goform/formSysCmd that can be exploited by manipulating the sysCm argument.

    0000078
    56.8K followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
HWdlinkdir-513a1--
HWdlinkdir-513a2--
OSdlinkdir-513_firmware1.10--

Explore more